$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1dc960e7-1590-4f72-857b-d680ff4ade7a.roa File: 1dc960e7-1590-4f72-857b-d680ff4ade7a.roa (raw, json) Hash identifier: ogIHPANnJfu8YZrT3tsnvbJ2R7Vl3flkYmJ8SDHOMNw= Subject key identifier: 9E:07:0F:E5:58:B0:81:C3:B0:55:35:B0:6B:45:77:BA:31:14:4B:50 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 04A37C03448226AB75A4EDFA6B88FB56ED2DBE60 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1dc960e7-1590-4f72-857b-d680ff4ade7a.roa Signing time: Fri 11 Jul 2025 18:10:15 +0000 ROA not before: Fri 11 Jul 2025 18:10:15 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:547::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a3:7c:03:44:82:26:ab:75:a4:ed:fa:6b:88:fb:56:ed:2d:be:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:10:15 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=0721b72a584dc39565921a7fc7c3fe9ee999ab4cca12ca9ca997058713163263, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:29:50:c3:6e:d9:06:25:e8:4d:dd:68:05: d8:ef:fd:08:90:46:21:ae:79:99:77:c0:c7:b8:21: 3d:27:77:4b:68:9c:1a:1d:14:af:38:dc:7d:82:cb: fe:60:26:69:91:11:56:77:dd:a3:d8:8c:a6:51:96: cc:94:66:26:bb:26:29:1f:11:04:e5:7c:52:55:f5: 28:6b:82:85:96:ac:06:f2:17:b1:66:69:70:d5:7c: 47:ed:44:dc:08:55:05:fc:23:a8:22:24:58:c9:d8: 38:77:1b:a6:df:08:01:06:59:f4:c0:b5:31:f6:ea: 35:fc:1f:e9:5a:13:a9:e4:ba:41:4f:f4:be:14:1f: f9:d6:b1:a5:e2:86:fb:9d:4e:9e:04:3a:28:d3:c5: f9:ec:fc:d9:90:74:f3:32:51:55:47:2b:f7:b5:dd: 48:03:32:7a:80:10:19:8e:f4:b4:fe:1e:1d:46:ba: 9f:61:0c:6e:d7:e6:5c:a7:2d:ed:73:06:a8:17:06: 6c:43:c4:61:b9:69:19:9b:bf:5a:64:d0:15:32:19: c3:c3:ae:04:e7:43:8d:a8:05:55:8e:14:85:cc:a5: 29:01:31:cc:21:6a:88:f1:eb:15:c4:5a:fb:2a:22: 4e:38:db:66:66:6b:37:b9:d5:c4:df:c5:78:58:6e: 81:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:07:0F:E5:58:B0:81:C3:B0:55:35:B0:6B:45:77:BA:31:14:4B:50 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1dc960e7-1590-4f72-857b-d680ff4ade7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:547::/48 Signature Algorithm: sha256WithRSAEncryption 83:b9:26:68:cf:16:e3:32:4b:c8:dc:1e:94:84:82:80:2a:4b: 95:75:66:17:78:fc:06:09:67:09:9b:5f:4f:2c:07:e9:d0:c5: 2f:f9:18:8f:f8:8d:1f:89:91:41:da:8e:c5:8d:36:21:a7:c0: 62:64:f2:84:87:ec:0c:da:75:21:0d:39:cf:88:50:67:3f:e8: f6:aa:a0:d6:38:d0:15:c4:da:e5:18:df:30:f3:1b:5b:d4:b3: d5:e6:41:27:5d:23:ed:68:e8:0b:ff:45:85:5c:66:01:bb:ae: 9d:c0:8b:1a:c7:22:f2:ce:df:59:d3:a2:db:68:5c:37:fd:29: 24:81:5f:3f:99:06:8d:8c:e2:fe:16:60:20:90:e9:83:a3:61: ea:bc:f9:33:55:24:3c:71:1d:4a:0d:e3:37:87:08:08:a0:b8: a3:ba:fd:bd:26:c7:16:a8:a9:ca:6a:0e:94:9a:00:a8:9b:30: 2f:5a:b2:18:22:a1:41:86:7e:70:19:bd:31:ec:7b:da:a2:be: 9e:03:53:2c:8a:73:44:c0:e3:4e:77:34:97:c7:38:76:ec:ea: bb:77:cc:94:21:fa:e7:dc:5a:9b:65:07:cb:b1:d0:db:2e:7b: 3c:b5:4a:15:b7:dc:dc:2c:42:f4:ad:a6:e5:15:3c:db:0c:ac: bb:30:0a:48 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBKN8A0SCJqt1pO36a4j7Vu0tvmAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMDE1WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzIxYjcyYTU4NGRjMzk1NjU5MjFhN2ZjN2MzZmU5ZWU5 OTlhYjRjY2ExMmNhOWNhOTk3MDU4NzEzMTYzMjYzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGISlQw27ZBiXoTd1oBdjv/QiQRiGueZl3wMe4IT0nd0to nBodFK843H2Cy/5gJmmREVZ33aPYjKZRlsyUZia7JikfEQTlfFJV9ShrgoWWrAby F7FmaXDVfEftRNwIVQX8I6giJFjJ2Dh3G6bfCAEGWfTAtTH26jX8H+laE6nkukFP 9L4UH/nWsaXihvudTp4EOijTxfns/NmQdPMyUVVHK/e13UgDMnqAEBmO9LT+Hh1G up9hDG7X5lynLe1zBqgXBmxDxGG5aRmbv1pk0BUyGcPDrgTnQ42oBVWOFIXMpSkB Mcwhaojx6xXEWvsqIk4422Zmaze51cTfxXhYboFJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUngcP5ViwgcOwVTWwa0V3ujEUS1AwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFkYzk2MGU3LTE1OTAtNGY3Mi04NTdiLWQ2ODBmZjRhZGU3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUcwDQYJKoZIhvcNAQELBQADggEBAIO5JmjPFuMyS8jcHpSEgoAq S5V1Zhd4/AYJZwmbX08sB+nQxS/5GI/4jR+JkUHajsWNNiGnwGJk8oSH7AzadSEN Oc+IUGc/6PaqoNY40BXE2uUY3zDzG1vUs9XmQSddI+1o6Av/RYVcZgG7rp3AixrH IvLO31nTottoXDf9KSSBXz+ZBo2M4v4WYCCQ6YOjYeq8+TNVJDxxHUoN4zeHCAig uKO6/b0mxxaoqcpqDpSaAKibMC9ashgioUGGfnAZvTHse9qivp4DUyyKc0TA4053 NJfHOHbs6rt3zJQh+ufcWptlB8ux0Nsuezy1ShW33NwsQvStpuUVPNsMrLswCkg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:04:31 2025 by rpki-client